Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
File: 7eKhItz_wiL6mYS_Frb58T94paU.cer (raw, json)
Hash identifier: bH6BwUEKEgNgTFVUK3jyK7fXA4kwJfn4Bupsa+QhUy4=
Subject key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCA767962D1B6C47658BF229693BD25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201712
IP: 93.95.214.0/24
IP: 2a13:e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:76:79:62:d1:b6:c4:76:58:bf:22:96:93:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:c9:c4:0b:92:56:66:2f:16:2b:d4:ea:0e:
25:7f:c3:5e:8e:79:6c:d2:a8:81:6e:4d:86:32:d6:
1b:12:dc:9f:0f:8d:40:7e:61:52:34:c7:32:44:57:
e8:a7:10:15:30:87:7d:2f:ad:54:ab:c2:17:31:7e:
3c:74:36:71:54:57:90:55:d1:14:48:6b:e9:b3:3b:
48:24:af:6b:33:31:4e:9b:00:38:d6:01:06:79:05:
8f:a4:cc:27:58:d4:26:76:6f:eb:09:28:0b:45:83:
e7:9f:06:d8:03:df:a1:25:c1:53:8f:ef:4a:39:f6:
d8:29:9d:7c:3f:fa:c2:ff:cd:65:f1:9d:e7:5a:f5:
d4:4a:64:46:40:68:0d:7f:5b:cd:35:b7:cd:d4:56:
6b:7b:02:8f:ab:2d:bb:bd:84:8f:f6:f1:93:16:a8:
69:c7:86:2c:61:33:b3:80:9f:e1:a5:77:b8:53:ef:
76:42:a8:08:d9:85:26:a8:b6:c3:af:b0:40:be:f6:
f6:38:16:6f:fc:10:f0:1c:69:56:03:86:b2:bb:55:
d1:ab:32:9e:67:f8:7b:84:b7:8a:fc:86:f5:b3:5e:
fc:f8:a1:44:09:b2:2f:af:ce:5f:fc:a6:83:70:0c:
6c:6f:b8:16:89:1e:dd:ca:f4:c3:71:f5:b8:69:ca:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.214.0/24
IPv6:
2a13:e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201712
Signature Algorithm: sha256WithRSAEncryption
a4:7b:8a:02:74:5e:94:45:76:e5:18:a4:b2:9d:56:01:00:a7:
59:27:10:43:f7:ac:8d:be:4e:40:1a:3c:f2:d6:0c:d0:92:e8:
3c:c1:c8:2f:5b:fd:78:ed:23:2e:0a:d7:70:86:bd:1c:12:18:
84:9e:8e:78:a2:6e:43:ce:d8:13:81:8b:e5:e8:56:a8:23:26:
2a:c9:cb:03:75:46:d5:dc:a0:3b:6c:c9:2c:2b:e6:70:d4:a9:
27:b1:17:3d:10:36:40:9b:bf:75:b2:da:02:6a:80:82:9d:30:
d8:7e:c4:85:64:5f:e8:9c:33:a5:92:18:95:cd:5d:4e:0b:a6:
68:90:0d:bf:b6:3a:96:65:62:75:99:cb:cc:9d:47:c5:c4:5a:
ed:b6:9d:93:ef:9e:95:46:f1:3d:ba:7f:5f:71:ea:55:f6:00:
d9:6f:6b:4a:25:55:63:5c:93:75:a0:48:44:78:60:d1:3b:5a:
e5:28:f6:4f:fa:a6:aa:c0:02:af:e1:7d:e8:37:fa:44:b4:4b:
4f:c4:92:ac:6c:f6:ad:a8:75:20:0e:b2:5b:56:f8:1b:be:83:
df:1f:c6:2e:a3:d6:ca:26:3b:97:33:5f:58:4c:20:c3:bc:53:
9f:c8:68:f8:6c:2b:c6:50:87:e1:3a:da:4a:dc:b9:42:a8:04:
f5:c1:76:4a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt9ynZ5YtG2xHZYvyKWk70lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGUyYTEyMmRjZmZjMjIyZmE5OTg0YmYxNmI2ZjlmMTNmNzhhNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxofJxAuSVmYvFivU6g4lf8Nejnls
0qiBbk2GMtYbEtyfD41AfmFSNMcyRFfopxAVMId9L61Uq8IXMX48dDZxVFeQVdEU
SGvpsztIJK9rMzFOmwA41gEGeQWPpMwnWNQmdm/rCSgLRYPnnwbYA9+hJcFTj+9K
OfbYKZ18P/rC/81l8Z3nWvXUSmRGQGgNf1vNNbfN1FZrewKPqy27vYSP9vGTFqhp
x4YsYTOzgJ/hpXe4U+92QqgI2YUmqLbDr7BAvvb2OBZv/BDwHGlWA4ayu1XRqzKe
Z/h7hLeK/Ib1s178+KFECbIvr85f/KaDcAxsb7gWiR7dyvTDcfW4acreFwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFO3ioSLc/8Ii+pmEvxa2+fE/eKWlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzZhZjNj
ZC01MjViLTQ5YmEtYjM4OC0yMzU5Y2I2MGE1NzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvNmFmM2Nk
LTUyNWItNDliYS1iMzg4LTIzNTljYjYwYTU3NC8xLzdlS2hJdHpfd2lMNm1ZU19G
cmI1OFQ5NHBhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXV/WMA0EAgACMAcDBQMqEw4AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMT8DANBgkqhkiG9w0BAQsFAAOCAQEApHuKAnRelEV2
5Riksp1WAQCnWScQQ/esjb5OQBo88tYM0JLoPMHIL1v9eO0jLgrXcIa9HBIYhJ6O
eKJuQ87YE4GL5ehWqCMmKsnLA3VG1dygO2zJLCvmcNSpJ7EXPRA2QJu/dbLaAmqA
gp0w2H7EhWRf6JwzpZIYlc1dTgumaJANv7Y6lmVidZnLzJ1HxcRa7badk++elUbx
Pbp/X3HqVfYA2W9rSiVVY1yTdaBIRHhg0Tta5Sj2T/qmqsACr+F96Df6RLRLT8SS
rGz2rah1IA6yW1b4G76D3x/GLqPWyiY7lzNfWEwgw7xTn8ho+GwrxlCH4TraSty5
QqgE9cF2Sg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:45 2026 by rpki-client